On 3/29/15 4:55 AM, TR Shaw wrote:
On Mar 29, 2015, at 1:45 AM, Dennis Peterson <denni...@inetnw.com> wrote:

On 3/28/15 10:43 PM, Jinwon Lee wrote:
Thanks for that.  I guess ‘Hash Value’ refers to the ClamAV identifying the 
.dmg as a known file that contains virus/es.

Jinwon


That was the case too for password protected zip files. If you can't burst the 
contents you condemn the wrapper.

Not entirely complete as you can tell ClamAV to mark encrypted zip and rar's as viruses 
without having a "sig".
Many milters will do the same without invoking clamav, so that's of limited 
value.

dp
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to